PT-2019-11651 · Robotronic · Robotronic Runasspc

Publicado

2019-04-24

·

Atualizado

2020-08-24

·

CVE-2019-10239

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Robotronic RunAsSpc version 3.7.0.0
Description: The issue allows locally authenticated attackers to obtain cleartext credentials of stored accounts due to insufficient protection of stored credentials.
Recommendations: For version 3.7.0.0, consider restricting access to stored credentials or implementing additional security measures to protect them until a fix is available.

Exploit

Correção

Insufficiently Protected Credentials

Improper Privilege Management

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-522CWE-269

Identificadores relacionados

CVE-2019-10239

Produtos afetados

Robotronic Runasspc